Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 8,950
Reset filtersWordPress Core < 4.7.1 - Information Disclosure
WordPress Ad Widget <= 2.11.0 - Local File Inclusion
WordPress Core < 4.7.2 - Path Disclosure
Chained Quiz <= 0.9.8 - Cross-Site Scripting
MailChimp for WordPress <= 4.0.10 - Reflected Cross-Site Scripting
BP Profile Search <= 4.5.3 - PHP Object Injection
WooCommerce Email Test <= 1.5 - Sensitive Data Exposure
Nelio AB Testing < 4.5.9 - Server Side Request Forgery
WP Vault <= 0.8.6.6 - Local File Inclusion
Platform 4 <= 1.1.4 - Cross-Site Request Forgery
Check & Log Email <= 0.5.1 - Reflected Cross-Site Scripting
All In One WP Security & Firewall <= 4.1.9 - Reflected Cross-Site Scripting
Post Grid <= 2.0.12 - Arbitrary File Deletion
GoDaddy Email Marketing < 1.1.4 - Cross-Site Request Forgery
InPost Gallery < 2.1.2.1 - Local File Inclusion
SAM Pro (Free Edition) < 1.9.7.69 & Simple Ads Manager <= 2.10.0.130 & SAM Pro Lite < 1.9.0.53 - Local/Remote File Inclusion
Simple Membership <= 3.3.2 - Multiple Cross-Site Request Forgery
WP Front End Profile <= 0.2.1 - Privilege Escalation
MailPoet Newsletters <= 2.7.2 - SQL Injection
MailPoet Newsletters <= 2.7.2 - Reflected Cross-Site Scripting
Gravity Forms <= 2.0.6.5 - Cross-Site Scripting
Mail Masta <= 1.0 - Local File Inclusion
WordPress Core <= 4.5.3 - Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.